+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Native Crypter (/showthread.php?tid=5822232)
Native Crypter - gr0w - Apr 8, 2018
Hey all,
Can anyone recommend a good native crypter for Net Wire? I'm looking for one that will not have .net dependencies after encryption.
Spartan Crypter is a native crypter but I have seen a lot of mixed reviews. Looks like it used to be good at one time.
I would really appreciate your honest opinions.
Thanks
RE: Native Crypter - Exodus - Apr 8, 2018
Try having a look at these: https://hackforums.net/showthread.php?tid=5676931 and https://breaking-security.net/octopus
RE: Native Crypter - gr0w - Apr 8, 2018
Thanks. Those do look promising but it looks like nucleus has stopped supporting netwire due to the long time it takes to fix run time detections.
Also Octopus is out of stock, definitely sounds good but they only sell 3 licenses per month.
RE: Native Crypter - dragonking - Apr 8, 2018
A crypter depends on 3 things.
Team: how often do they re-fud?
Clients: How many customers do they have? Are you receiving a private, small-share, or public stub? If it's a lot, odds are it's not fud for long whenever they do decide to re-fud.
Quality: Is it a copy/paste source code or did they actually build it from scratch?
Remember; you get what you pay for. Don't expect any crypter under $250/monthly rent to serve you any real justice.
RE: Native Crypter - gr0w - Apr 8, 2018
(Apr 8, 2018 04:00 PM)dragonking Wrote: A crypter depends on 3 things.
Team: how often do they re-fud?
Clients: How many customers do they have? Are you receiving a private, small-share, or public stub? If it's a lot, odds are it's not fud for long whenever they do decide to re-fud.
Quality: Is it a copy/paste source code or did they actually build it from scratch?
Remember; you get what you pay for. Don't expect any crypter under $250/monthly rent to serve you any real justice.
Thanks for your input. I see what you mean. A good one is not cheap for a reason.
RE: Native Crypter - Whyn - Apr 10, 2018
(Apr 8, 2018 04:00 PM)dragonking Wrote: A crypter depends on 3 things.
Team: how often do they re-fud?
Clients: How many customers do they have? Are you receiving a private, small-share, or public stub? If it's a lot, odds are it's not fud for long whenever they do decide to re-fud.
Quality: Is it a copy/paste source code or did they actually build it from scratch?
Remember; you get what you pay for. Don't expect any crypter under $250/monthly rent to serve you any real justice.
Cyber seal is pretty fantastic even with a public stub. Gets refud every 1-2 weeks (Thanks for lettin' me know, CC :) if there's a 2-3 detection ratio. Contact Cyber Coder on his sales thread and he'll answer your questions before you buy.
RE: Native Crypter - getapt - Apr 11, 2018
Cyber Seal is pretty good is Long-Lasting and has 2-3 detection/month.
RE: Native Crypter - gr0w - Apr 11, 2018
Cyber Seal works good for .NET programs, and it does have the ability to work with native files, but the crypted file will be .net dependent and not work on some versions of windows.
The whole point of a native RAT is that it will work with every windows version and you don't have to hope the computer has the right version of .NET framework installed.
RE: Native Crypter - Whyn - Apr 11, 2018
(Apr 11, 2018 05:14 PM)gr0w Wrote: Cyber Seal works good for .NET programs, and it does have the ability to work with native files, but the crypted file will be .net dependent and not work on some versions of windows.
The whole point of a native RAT is that it will work with every windows version and you don't have to hope the computer has the right version of .NET framework installed.
Did you confirm that with Cyber Coder? Cyberseal will detect whether the file is managed [.net] or native and will auto select the appropriate crypt before you seal it.
Most, not all, of Windows users are running on recent net framework though so as long as they're recent they should still be backwards compatible with older .net. I haven't seemed to have had any problems testing out 2.x net dependant servers with 4.x framework.
RE: Native Crypter - Whyn - Apr 11, 2018
(Apr 11, 2018 07:19 PM)Individual Byte Patterns Wrote: .NET Framework 4.0 is not backwards compatible with .NET 2.0/3.5, you must have .NET Framework 2.0/3.5 installed on the machine in order for .NET 2.0/3.5 programs to run.
I stand corrected then. I guess the 2.0/3.5 isn't overwritten when you install 4.0. 🙃
RE: Native Crypter - inyourmemory - Apr 12, 2018
try https://titancrypt.ru
or https://crypt.guru
Both are native and runtime FUD. Scantime .NET crypters here means nothing.
RE: Native Crypter - Whyn - Apr 12, 2018
(Apr 12, 2018 12:48 AM)Win64Worm Wrote: try https://titancrypt.ru
or https://crypt.guru
Both are native and runtime FUD. Scantime .NET crypters here means nothing.
Crypt guru:
"40$ - 1 day, 1 file, 1 replacement original file per day is available.250$ - 7 days, 1 file, up to 3 replacements daily.1000$ - 30 days, 1 file, up to 3 replacements daily."
Jesus Christ the crack must be AMAZING in Russia!!!!! 🎉 🤗 🎉
RE: Native Crypter - gr0w - Apr 12, 2018
(Apr 11, 2018 05:43 PM)Whyn Wrote: Did you confirm that with Cyber Coder? Cyberseal will detect whether the file is managed [.net] or native and will auto select the appropriate crypt before you seal it.
Most, not all, of Windows users are running on recent net framework though so as long as they're recent they should still be backwards compatible with older .net. I haven't seemed to have had any problems testing out 2.x net dependant servers with 4.x framework.
Yes, he said that a .net crypter will make whatever file it encrypts dependent on the framework. That's what figured anyways, but figured I would check.
RE: Native Crypter - Whyn - Apr 13, 2018
(Apr 12, 2018 05:16 PM)gr0w Wrote: Yes, he said that a .net crypter will make whatever file it encrypts dependent on the framework. That's what figured anyways, but figured I would check.
I did a quick test today with a crypt on an 8.1 VM and it prompted for the older .net framework and automatically found and downloaded it for me.